Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/hISxjijW8Xq9HyWpGQUDRVuqWns.roa
File:                     hISxjijW8Xq9HyWpGQUDRVuqWns.roa (raw, json)
Hash identifier:          om0Ds47UE6hnkjKtEXGK0rWEp39616+5gxmPoR3Mb/Y=
Subject key identifier:   84:84:B1:8E:28:D6:F1:7A:BD:1F:25:A9:19:05:03:45:5B:AA:5A:7B
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0308
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/hISxjijW8Xq9HyWpGQUDRVuqWns.roa
Signing time:             Tue 25 May 2021 02:42:02 +0000
ROA not before:           Tue 25 May 2021 02:42:02 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     10010
IP address blocks:        219.106.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: May 25 02:42:02 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=8484B18E28D6F17ABD1F25A9190503455BAA5A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:4f:7a:3f:dd:e2:6b:47:e2:36:fa:16:dd:
                    9a:19:58:29:26:c3:48:a4:04:36:22:d8:62:66:5e:
                    1d:73:62:2a:7d:ad:61:19:dc:a1:43:81:62:4d:28:
                    43:eb:73:fa:78:0d:91:ab:20:17:72:00:5f:d1:98:
                    61:fe:3a:ec:a0:5d:7e:b0:5f:3a:e2:c6:7d:2b:d1:
                    46:bb:25:81:1c:3a:3a:e3:82:77:5e:d0:3f:79:02:
                    d7:7a:13:fd:db:90:a7:e1:8d:cf:b0:12:87:3d:c1:
                    e6:7e:38:ae:a5:88:fc:45:ca:db:81:c1:6b:f9:71:
                    89:73:cb:c2:42:bb:c2:22:d5:0e:fa:db:47:5d:e2:
                    82:1e:cc:fa:d8:8c:08:6d:24:3c:7e:f6:31:e0:99:
                    dd:a1:77:9f:64:29:21:42:f9:58:94:11:9d:66:43:
                    42:ea:67:4a:b7:6a:d4:32:a0:6e:0b:05:69:d6:92:
                    06:7f:9d:12:1d:bc:66:77:e2:09:68:94:d1:05:c8:
                    d0:77:b2:04:e6:b8:4b:4a:a3:39:4e:c9:04:8a:96:
                    35:dc:3f:40:22:47:fc:6c:2d:77:b5:98:fa:87:59:
                    51:e9:89:f5:05:aa:b9:12:4e:d0:4a:ed:1d:f6:08:
                    cb:2a:bc:25:1a:ae:25:1d:25:4b:1e:a0:c6:d2:e3:
                    60:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:84:B1:8E:28:D6:F1:7A:BD:1F:25:A9:19:05:03:45:5B:AA:5A:7B
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/hISxjijW8Xq9HyWpGQUDRVuqWns.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.106.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:80:37:30:0d:13:ff:2e:5b:bd:aa:e8:28:5b:32:57:07:
         1b:61:56:77:d3:24:6a:99:34:81:f0:d2:e3:94:4b:a1:57:3a:
         bf:07:03:97:01:47:b3:7b:26:cb:13:b4:d6:4f:24:83:db:e0:
         86:0e:3b:7b:49:2e:d8:6d:09:fe:fd:fd:3e:b3:92:7a:18:bd:
         eb:9e:8a:5e:43:32:a9:41:d3:cd:0c:53:4b:99:f4:ef:ba:33:
         21:1f:f4:01:1d:59:91:a4:6f:e6:68:21:74:97:82:6b:3f:e1:
         b9:17:07:7b:90:de:a8:60:52:5b:76:e7:70:63:a5:90:9f:75:
         60:6e:80:27:9e:81:9e:fe:de:82:2d:83:80:ff:a1:fc:94:3d:
         3a:0a:41:4c:1d:a5:44:ce:8d:b7:4e:91:70:cb:77:00:61:ff:
         7b:17:11:7e:05:62:2f:6a:f2:80:5a:b9:8c:24:0b:d1:b2:ae:
         bf:5d:29:0e:d4:2a:39:64:ef:00:85:e8:78:27:32:5a:9b:e0:
         b2:28:76:83:5a:43:d8:fe:06:48:76:02:6c:1b:9d:72:79:57:
         95:d5:c4:7e:3c:b5:c5:9f:42:37:bc:71:46:80:7c:2f:37:ce:
         c3:9b:6d:39:3d:84:6c:0b:09:8b:d9:1c:b3:5b:75:e1:61:df:
         b2:df:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:55 2024 by rpki-client on console-fra.rpki-client.org